Solved

What to do with the gateway when implenting a HP5406zl switch with Vlan routing

Posted on 2013-05-29
4
468 Views
Last Modified: 2013-06-06
Hi,

we've just bought a HP 5406zl witch we will use as a router between our internal networks.
At the moment we use a Juniper SRX firewall to do the routing (no policies exist internal)
I have a "simple" question ;-)
I know we can setup the HP5406zl as a router between the Vlans but do we have to change the gateway on the network where the firewall is placed to the HP5406zl or can we keep our firewall ipaddress as the gateway? (I suppose not, but I wan't to be sure)

The pc's are on the 10.0.0.0/22 network with 10.0.0.1 as gateway, the networks 10.0.5.0/24, 10.0.8.0/24 and 10.0.10.0/24, have all a gateway on the firewall (all on a separate interface).
So for the networks 10.0.5.0/24, 10.0.8.0/24 and 10.0.10.0/24 I can create a Vlan with the same ip as the actual gateway, I suppose I just add a route on those gateways to 10.0.0.1, (the firewall gateway to the internet) and if needed a ACL to block a some Vlan's to access some other if needed. But the 10.0.0.0/22 uses the firewall as the gateway 10.0.0.1 so what do I do with this gateway?
Do I create a Vlan with ip 10.0.0.2 and use that as the gateway on the pc's? And then add a route on the switch to go to the internet via 10.0.0.1?

I hope someone can help me on setting up this switch ;-)
0
Comment
Question by:heensit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 17

Accepted Solution

by:
jburgaard earned 350 total points
ID: 39206052
I do not know how easy it is to change settings on a Juniper SRX firewall, but what springs to my mind is:
As I read your Q, you want to move  A L L  internal routing to HP 5406zl, operating as L3-switch. So move ALL internal vlan-IP's to this (including 10.0.0.1) .
Keep clients as they are.
Between FW and L3 make a transport-vlan.
So on FW set internal IP: 192.168.99.1
On L3 make transport-vlan with IP 192.168.99.2
on FW make an:       ip route 10.0.0.0  255.0.0.0  192.168.99.2
on L3 make a dgw:   ip route 0.0.0.0  0.0.0.0  192.168.99.1

HTH
0
 
LVL 2

Author Comment

by:heensit
ID: 39206861
looks like a good plan ;-) but we are using our firewall to do natting (citrix/mail/http) wouldn't that give a problem if the 10.0.0.0/22 subnet is no longer on the firewall.
I always thought that the subnet of the ipaddresses where you want to forward to needed to be on one of the interfaces...
0
 

Assisted Solution

by:TFortson514
TFortson514 earned 150 total points
ID: 39211930
jburs plan is solid.  You would just need to make sure that the firewall knows how to get to the 10 subnet for nating purposes... ie static route or participating in routing.
0
 
LVL 2

Author Closing Comment

by:heensit
ID: 39226884
Hi,

tnx the migration didn't go totally smooth, but after eliminating some minor error it seems to work fine...
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
fabric 1 80
NTP configuration on Cisco switch 3 40
Change "enable" password on Cisco Router 7 55
Dell SonicWall Connection 18 59
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question